Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | 2026-08-29 | 2026-09-17 |
|---|---|---|
| ≥90 % | 4 | 0 |
| ≥50 % | 4 | 0 |
| ≥10 % | 3 | 0 |
| <10 % | 304 | 300 |
CVE-2026-89841 | Linux Kernel up to 6.18.50/7.2.4 f2fs redirty_blocks use after free (WID-SEC-2026-3438)
A vulnerability was found in Linux Kernel up to 6.18.50/7.2.4 and classified as very critical. The impacted element is the function redirty_blocks of the component f2fs. The manipulation results in use after free. This vulnerability is cata
CVE-2026-89840 | Linux Kernel up to 7.2.4 f2fs __clone_blkaddrs input validation (WID-SEC-2026-3438)
A vulnerability has been found in Linux Kernel up to 7.2.4 and classified as very critical. The affected element is the function __clone_blkaddrs of the component f2fs. The manipulation leads to improper input validation. This vulnerability
CVE-2026-89839 | Linux Kernel up to 6.6.156/6.12.109/6.18.50/7.2.4 f2fs f2fs_xattr_advise_set privileges management (WID-SEC-2026-3438)
A vulnerability marked as very critical has been reported in Linux Kernel up to 6.6.156/6.12.109/6.18.50/7.2.4. This vulnerability affects the function f2fs_xattr_advise_set of the component f2fs. This manipulation causes improper privilege
CVE-2026-89838 | Linux Kernel up to 7.2.4 F2FS recover_inode/recover_dentry buffer overflow (WID-SEC-2026-3438)
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 7.2.4. Impacted is the function recover_inode/recover_dentry of the component F2FS. Executing a manipulation can lead to buffer overflow. This vulnerabi
CVE-2026-89837 | Linux Kernel up to 6.18.50/7.2.4 f2fs find_in_level release of resource (WID-SEC-2026-3438)
A vulnerability labeled as critical has been found in Linux Kernel up to 6.18.50/7.2.4. This affects the function find_in_level of the component f2fs. The manipulation results in missing release of resource. This vulnerability is known as C
CVE-2026-26950 | Dell SmartFabric Manager up to 2.2.0 improper authentication (EUVD-2026-81676)
A vulnerability categorized as critical has been discovered in Dell SmartFabric Manager up to 2.2.0. This issue affects some unknown processing. Executing a manipulation can lead to improper authentication. This vulnerability appears as CVE
CVE-2026-80355 | Dell OpenManage Server Administrator up to 11.1.0.2 cross-site request forgery (EUVD-2026-81578)
A vulnerability was found in Dell OpenManage Server Administrator. It has been rated as problematic. This affects an unknown part. This manipulation causes cross-site request forgery. This vulnerability is handled as CVE-2026-80355. The att
CVE-2026-28326 | SolarWinds Access Rights Manager hard-coded credentials (EUVD-2026-82317)
A vulnerability labeled as critical has been found in SolarWinds Access Rights Manager. Affected is an unknown function. Executing a manipulation can lead to hard-coded credentials. This vulnerability is registered as CVE-2026-28326. It is
CVE-2026-43815 | Apple macOS up to 14.8.7/15.7.7/26.5 afpfs buffer overflow (EUVD-2026-77899)
A vulnerability marked as very critical has been reported in Apple macOS up to 14.8.7/15.7.7/26.5. This vulnerability affects unknown code of the component afpfs. This manipulation causes buffer overflow. This vulnerability appears as CVE-2
CVE-2026-76781 | Fedora libxml2 Catalog null pointer dereference (EUVD-2026-81679)
A vulnerability was found in Fedora libxml2. It has been declared as critical. This affects an unknown part of the component Catalog. Executing a manipulation can lead to null pointer dereference. This vulnerability appears as CVE-2026-7678
CVE-2026-89836 | Linux Kernel up to 7.2.4 f2fs folio_nr_pages i_pages/mapping race condition (WID-SEC-2026-3438)
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 7.2.4. This issue affects the function folio_nr_pages of the component f2fs. Performing a manipulation of the argument i_pages/mapping results in r
CVE-2026-89834 | Linux Kernel up to 6.12.109/6.18.50/7.2.4 f2fs free_segment_range out-of-bounds (WID-SEC-2026-3438)
A vulnerability was found in Linux Kernel up to 6.12.109/6.18.50/7.2.4 and classified as very critical. Affected is the function free_segment_range of the component f2fs. Such manipulation leads to out-of-bounds read. This vulnerability is
CVE-2026-89835 | Linux Kernel up to 6.12.109/6.18.50/7.2.4 f2fs set_task_ioprio null pointer dereference (WID-SEC-2026-3438)
A vulnerability identified as problematic has been detected in Linux Kernel up to 6.12.109/6.18.50/7.2.4. Affected by this issue is the function set_task_ioprio of the component f2fs. The manipulation leads to null pointer dereference. This
CVE-2026-89832 | Linux Kernel up to 6.18.50/7.2.4 f2fs return value (WID-SEC-2026-3438)
A vulnerability classified as very critical was found in Linux Kernel up to 6.18.50/7.2.4. This vulnerability affects unknown code of the component f2fs. Such manipulation leads to unchecked return value. This vulnerability is referenced as
CVE-2026-89833 | Linux Kernel up to 6.18.50/7.2.4 f2fs f2fs_fsync_node_pages race condition (WID-SEC-2026-3438)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.18.50/7.2.4. Affected by this vulnerability is the function f2fs_fsync_node_pages of the component f2fs. Executing a manipulation can lead to race condition
CVE-2026-89831 | Linux Kernel up to 7.2.4 f2fs race condition (WID-SEC-2026-3438)
A vulnerability classified as critical has been found in Linux Kernel up to 7.2.4. This affects an unknown part of the component f2fs. This manipulation causes race condition. The identification of this vulnerability is CVE-2026-89831. The
CVE-2026-89830 | Linux Kernel up to 6.12.109/6.18.50/7.2.4 f2fs __allocate_data_block data_blkaddr allocation of resources (WID-SEC-2026-3438)
A vulnerability described as critical has been identified in Linux Kernel up to 6.12.109/6.18.50/7.2.4. Affected by this issue is the function __allocate_data_block of the component f2fs. The manipulation of the argument data_blkaddr result
CVE-2026-89829 | Linux Kernel up to 6.18.50/7.2.4 f2fs f2fs_sanity_check_node_footer index infinite loop (WID-SEC-2026-3438)
A vulnerability marked as very critical has been reported in Linux Kernel up to 6.18.50/7.2.4. Affected by this vulnerability is the function f2fs_sanity_check_node_footer of the component f2fs. The manipulation of the argument index leads
CVE-2026-89828 | Linux Kernel up to 6.18.50/7.2.4 amdgpu_vram_mgr drm/amdgpu amdgpu_vram_mgr_init free_trees null pointer dereference (WID-SEC-2026-3438)
A vulnerability labeled as critical has been found in Linux Kernel up to 6.18.50/7.2.4. Affected is the function amdgpu_vram_mgr_init of the file drm/amdgpu of the component amdgpu_vram_mgr. Executing a manipulation of the argument free_tre
CVE-2026-89826 | Linux Kernel up to 6.18.50/7.2.4 panthor panthor_fw_read_build_info out-of-bounds (WID-SEC-2026-3438)
A vulnerability identified as very critical has been detected in Linux Kernel up to 6.18.50/7.2.4. This impacts the function panthor_fw_read_build_info of the component panthor. Performing a manipulation results in out-of-bounds read. This
CVE-2026-89827 | Linux Kernel up to 7.2.4 UVD Ring drm/amdgpu amdgpu_uvd_resume uninitialized pointer (WID-SEC-2026-3438)
A vulnerability was found in Linux Kernel up to 7.2.4. It has been rated as very critical. The impacted element is the function amdgpu_uvd_resume of the file drm/amdgpu of the component UVD Ring. This manipulation causes uninitialized point
CVE-2026-89825 | Linux Kernel up to 6.12.109/6.18.50/7.2.4 panthor drm/panthor panthor_init_cs_iface/panthor_init_csg_iface memory corruption (WID-SEC-2026-3438)
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.12.109/6.18.50/7.2.4. This affects the function panthor_init_cs_iface/panthor_init_csg_iface of the file drm/panthor of the component panthor. Such man
CVE-2026-93313 | Freedesktop Poppler 26.07.0 poppler/JBIG2Stream.cc readCodeTableSeg integer overflow (ID 1760 / EUVD-2026-82614)
A vulnerability identified as critical has been detected in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc. Performing a manipulation results in integer ove
CVE-2026-93456 | batiste django-page-cms up to 2.0.13 Admin Views pages/admin/views.py cross site scripting (EUVD-2026-82616)
A vulnerability has been found in batiste django-page-cms up to 2.0.13 and classified as problematic. This vulnerability affects unknown code of the file pages/admin/views.py of the component Admin Views. The manipulation leads to cross sit
CVE-2026-93455 | batiste django-page-cms up to 2.0.13 permission (EUVD-2026-82615)
A vulnerability classified as problematic was found in batiste django-page-cms up to 2.0.13. Affected by this vulnerability is an unknown functionality. Such manipulation leads to permission issues. This vulnerability is referenced as CVE-2
CVE-2026-82980 | Nextcloud Files Lock up to 33.0.0 WebDAV Plugin improper authorization (EUVD-2026-82617)
A vulnerability, which was classified as critical, has been found in Nextcloud Files Lock up to 33.0.0. Affected by this issue is some unknown functionality of the component WebDAV Plugin. Performing a manipulation results in improper autho
CVE-2026-77169 | Nextcloud Team Folders up to 21.x improper authorization (EUVD-2026-82618)
A vulnerability classified as problematic has been found in Nextcloud Team Folders up to 21.x. Affected is an unknown function. This manipulation causes improper authorization. The identification of this vulnerability is CVE-2026-77169. It
CVE-2026-82982 | Nextcloud Approval up to 3.0.0 etag improper authentication (EUVD-2026-82619)
A vulnerability identified as problematic has been detected in Nextcloud Approval up to 3.0.0. The affected element is an unknown function. Performing a manipulation of the argument etag results in improper authentication. This vulnerabilit
CVE-2026-77170 | Nextcloud Deck up to 1.18.0 Deck config API permission (EUVD-2026-82620)
A vulnerability marked as problematic has been reported in Nextcloud Deck up to 1.18.0. This affects an unknown function of the component Deck config API. The manipulation leads to permission issues. This vulnerability is uniquely identifie
CVE-2026-87283 | Oracle VirtualBox 7.2.16 Core privileges management (Nessus ID 346974)
A vulnerability marked as problematic has been reported in Oracle VirtualBox 7.2.16. This vulnerability affects unknown code of the component Core. The manipulation leads to improper privilege management. This vulnerability is listed as CVE
CVE-2026-92413 | Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9 PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereference (Bug 709610 / Nessus ID 346975)
A vulnerability described as problematic has been identified in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdf_open_filter of the file pdf-stream.c of the component PDF Xref
CVE-2026-92987 | RazrFalcon roxmltree up to 0.21.1 XML Parsing resource consumption (Nessus ID 346976)
A vulnerability was found in RazrFalcon roxmltree up to 0.21.1. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the component XML Parsing. This manipulation causes resource consumption. This v
CVE-2026-87278 | Oracle VirtualBox 7.2.16 Core denial of service (Nessus ID 346977)
A vulnerability was found in Oracle VirtualBox 7.2.16. It has been declared as problematic. Affected by this issue is some unknown functionality of the component Core. Such manipulation leads to denial of service. This vulnerability is uniq
CVE-2026-93375 | Google Chrome up to 153.0.8010.47 Tracing sandbox (Nessus ID 346979)
A vulnerability identified as problematic has been detected in Google Chrome. Affected by this vulnerability is an unknown functionality of the component Tracing. This manipulation causes sandbox issue. This vulnerability appears as CVE-202
CVE-2022-44387 | EyouCMS 1.5.9-UTF8-SP1 Basic Information cross-site request forgery (Issue 29 / EUVD-2022-47330)
A vulnerability described as problematic has been identified in EyouCMS 1.5.9-UTF8-SP1. Impacted is an unknown function of the component Basic Information Component. Such manipulation leads to cross-site request forgery. This vulnerability
CVE-2022-44390 | EyouCMS 1.5.9-UTF8-SP1 Public Security Record Number cross site scripting (Issue 31 / EUVD-2022-47333)
A vulnerability has been found in EyouCMS 1.5.9-UTF8-SP1 and classified as problematic. The impacted element is an unknown function of the component Public Security Record Number Handler. The manipulation leads to cross site scripting. This
CVE-2022-44389 | EyouCMS 1.5.9-UTF8-SP1 Edit Admin Profile cross-site request forgery (Issue 30 / EUVD-2022-47332)
A vulnerability, which was classified as problematic, was found in EyouCMS 1.5.9-UTF8-SP1. The affected element is an unknown function of the component Edit Admin Profile Module. Executing a manipulation can lead to cross-site request forge
CVE-2022-44384 | rConfig 3.9.6 PHP File unrestricted upload (Exploit 49783 / EUVD-2022-47327)
A vulnerability was found in rConfig 3.9.6. It has been classified as critical. This issue affects some unknown processing of the component PHP File Handler. Performing a manipulation results in unrestricted upload. This vulnerability is kn
CVE-2022-44379 | Automotive Shop Management System 1.0 Master.php?f=delete_service sql injection (EUVD-2022-47324)
A vulnerability was found in Automotive Shop Management System 1.0. It has been declared as critical. This impacts an unknown function of the file /asms/classes/Master.php?f=delete_service. Such manipulation leads to sql injection. This vul
CVE-2026-89824 | Linux Kernel up to 7.2.4 i2c adapter panel-edp.c memory leak (WID-SEC-2026-3438)
A vulnerability was found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.50/7.2.4. It has been classified as critical. Impacted is an unknown function of the file panel-edp.c of the component i2c adapter. The manipulation leads to memo
CVE-2026-89823 | Linux Kernel up to 7.2.4 drm drm_dev_register race condition (WID-SEC-2026-3438)
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 7.2.4. Affected by this issue is the function drm_dev_register of the component drm. This manipulation causes race condition. This vulnerability is
CVE-2026-89822 | Linux Kernel up to 7.3-rc1 i915 i915_pci_probe null pointer dereference (WID-SEC-2026-3438)
A vulnerability identified as problematic has been detected in Linux Kernel up to 7.3-rc1. The affected element is the function i915_pci_probe of the component i915. This manipulation causes null pointer dereference. This vulnerability is h
CVE-2026-89821 | Linux Kernel up to 7.2.4 drm/amd/display __is_lut_linear divide by zero (WID-SEC-2026-3438)
A vulnerability was found in Linux Kernel up to 7.2.4 and classified as critical. This issue affects the function __is_lut_linear of the file drm/amd/display. Executing a manipulation can lead to divide by zero. This vulnerability is regist
CVE-2026-89820 | Linux Kernel up to 6.18.50/7.2.4 AMD Display drm/amd/display amdgpu_dm_commit_zero_streams locking (WID-SEC-2026-3438)
A vulnerability classified as critical was found in Linux Kernel up to 6.18.50/7.2.4. Affected by this vulnerability is the function amdgpu_dm_commit_zero_streams of the file drm/amd/display of the component AMD Display. The manipulation re
DFN-CERT-2026-4940 libvirt: Eine Schwachstelle ermöglicht die Eskalation von Privilegien
sowie Red Hat Enterprise Linux Server in Version AUS 9.2, 9.4 und 9.6 ... Gruppenleiter*in Managed Windows ServerBerlin, Home Office. PSI Software ... Weiterlesen
CVE-2026-66395 | siyuan-note SiYuan up to 3.7.1 Bazaar Plugin Readme plugin name cross site scripting
A vulnerability, which was classified as problematic, was found in siyuan-note SiYuan up to 3.7.1. This affects an unknown function of the component Bazaar Plugin Readme Handler. The manipulation of the argument plugin name results in cross
CVE-2026-65013 | Onlook up to 0.2.32 tRPC API projectId/conversationId authorization (423e2e9)
A vulnerability classified as critical was found in Onlook up to 0.2.32. Affected by this vulnerability is the function project.get/member.remove/chat.conversation.delete of the component tRPC API. Such manipulation of the argument projectI
CVE-2026-66396 | siyuan-note SiYuan up to 3.7.1 Gallery/Kanban Cover Images cross site scripting
A vulnerability, which was classified as problematic, has been found in siyuan-note SiYuan up to 3.7.1. The impacted element is an unknown function of the component Gallery/Kanban Cover Images. The manipulation leads to cross site scripting
CVE-2026-66005 | janhq Jan up to 0.8.4 Local API Server cross-domain policy (EUVD-2026-48611)
A vulnerability categorized as problematic has been discovered in janhq Jan up to 0.8.4. This issue affects some unknown processing of the component Local API Server. Executing a manipulation can lead to permissive cross-domain policy with
CVE-2026-65606 | siyuan-note SiYuan up to 3.7.1 Protocol app/src/layout/Tab.ts innerHTML icon cross site scripting
A vulnerability, which was classified as problematic, has been found in siyuan-note SiYuan up to 3.7.1. The impacted element is the function innerHTML of the file app/src/layout/Tab.ts of the component Protocol Handler. The manipulation of
CVE-2026-63765 | Chatwoot up to 4.15.x Direct Uploads Controller missing authentication
A vulnerability was found in Chatwoot up to 4.15.x and classified as critical. Affected by this vulnerability is an unknown functionality of the component Direct Uploads Controller. Such manipulation leads to missing authentication. This vu
CVE-2026-65605 | siyuan-note SiYuan up to 3.7.1 Attribute View innerHTML Template column value cross site scripting
A vulnerability labeled as problematic has been found in siyuan-note SiYuan up to 3.7.1. This affects the function innerHTML of the component Attribute View. The manipulation of the argument Template column value results in cross site scrip
CVE-2026-50696 | Microsoft Windows up to Server 2025 Internet Key Exchange buffer overflow
A vulnerability categorized as critical has been discovered in Microsoft Windows up to Server 2025. Impacted is an unknown function of the component Internet Key Exchange. Executing a manipulation can lead to buffer overflow. This vulnerabi
CVE-2026-59258 | immich-app immich up to 3.0.2 id/user access control (EUVD-2026-44755)
A vulnerability classified as critical was found in immich-app immich up to 3.0.2. This impacts an unknown function. The manipulation of the argument id/user results in improper access controls. This vulnerability is cataloged as CVE-2026-5
CVE-2026-59255 | SpecterOps BloodHound up to 9.4.0 Custom-Nodes API authorization (EUVD-2026-44754)
A vulnerability described as critical has been identified in SpecterOps BloodHound up to 9.4.0. The impacted element is an unknown function of the component Custom-Nodes API. Executing a manipulation can lead to missing authorization. This
CVE-2026-56176 | Microsoft Windows up to Server 2025 Win32K out-of-bounds
A vulnerability described as problematic has been identified in Microsoft Windows. Affected by this vulnerability is an unknown functionality of the component Win32K. Such manipulation leads to out-of-bounds read. This vulnerability is refe
CVE-2026-62240 | crewAIInc crewAI up to 1.15.0 URL Validation validate_url server-side request forgery
A vulnerability was found in crewAIInc crewAI up to 1.15.0 and classified as problematic. This vulnerability affects the function validate_url of the component URL Validation. Executing a manipulation can lead to server-side request forgery
CVE-2026-62239 | Dao-AILab FlashAttention up to 2.8.3.post1 Archive Extraction hopper/setup.py download_and_copy symlink
A vulnerability, which was classified as problematic, was found in Dao-AILab FlashAttention up to 2.8.3.post1. Affected by this issue is the function download_and_copy of the file hopper/setup.py of the component Archive Extraction. Such ma
Steam Windows 0-Day Vulnerability Allows Users to Silently Escalate to Full SYSTEM Privileges
A newly disclosed Windows zero-day affecting the Steam Client Service can reportedly let a standard local user obtain NT AUTHORITY\SYSTEM privileges without administrator credentials, a User Account Control prompt, Steam authentication, or
CVE-2026-93331 | GPAC 26.08-DEV RTP Depacketizer rtp_depacketizer.c gf_rtp_parse_ttxt size out-of-bounds (Issue 3868 / EUVD-2026-82639)
A vulnerability labeled as critical has been found in GPAC 26.08-DEV. This vulnerability affects the function gf_rtp_parse_ttxt of the file src/ietf/rtp_depacketizer.c of the component RTP Depacketizer. Such manipulation of the argument siz